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- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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DETAILED ACTION 

1. Claims 1-75 have been examined. 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1-72 are rejected under 35 U.S.C. 102(e) as being anticipated by Downs et al US 
Patent 6,574,609 (hereinafter Downs). 

4. As per claim 1 , Downs teaches a system for distributing digital documents having usage 
rights associated therewith, said system comprising: 

a server having at least one digital document stored thereon (i.e., content providers or 
digital content stores) [column 10, lines 5-17 and 28-42]; 

a client computer having a standard application program including a rendering engine 
capable of being accessed to render content (i.e., end-user devices) [column 1 1 , lines 54- 
column 12, line 10]; 

a communications network coupled to said client and said server [column lines 11-17]; 

and 

a security module adapted to be attached to the standard application program for 
enforcing security conditions for accessing the rendering engine [column 22, lines 9-16, 60-67]. 
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5. As per claims 2 and 3, Downs further teaches the system wherein the security conditions 
include usage rights associated with the content [column 22, lines 9-16, 60-67]. 

6. As per claims 4, 23-27 and 35-36, Downs further teaches wherein said security module 
is operative to determine if said client computer is missing any security component software 
based on a predetermined configuration required for managing security of requested content 
and if said at least one client unit is missing any security component software based on said 
predetermined configuration, said security module is operative to provide said missing security 
component software to said client computer [column 77, lines 17-37]. 

7. As per claims 5 and 32-34, Downs further teaches the system wherein said security 
module is operative to check the content to determine if requested content requires a client side 
component of said security module and to disengage the client side security component from 
the standard application if the requested content does not require a client side security 
component [column 78, lines 22-40 and column 77, lines 17-37]. 

8. As per claim 6, Downs further teaches the system wherein said server comprises plural 
server computers and said security module is operative to cause said client computer to 
exchange one or more keys with a first of said server computers to obtain a validation 
certificate, said validation certificate permitting said client computer to securely communicate 
with a second of said server computers without any further exchange of keys between said 
client computer and any of said server computers [column 77, lines 17-37]. 
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9. As per claims 7 and 8, Downs teaches the system wherein said security module is 
operative to define a user interface of said standard application in accordance with parameters 
specified by said server [column 78, lines 7-21]. 

10. As per claims 9-1 1 , Downs teaches the system wherein said security module is 
operative to superimpose a watermark based on client specific data on a image rendered by 
said rendering engine [column 79, lines 4-25]. 

11. As per claims 12-17, Downs teaches the system further comprising a transaction 
aggregator system for managing transactions relating to document distribution and wherein said 
security module comprises a server side security component that directs the client computer to 
the transaction aggregator to receive a client side security component in exchange for 
transmitting user information to the transaction aggregator when said client computer makes a 
request for content and when said client side security component is not installed in said client 
computer, and wherein said transaction aggregator validates said client computer, based on 
predetermined conditions, and wherein said client side security component is unique to thereby 
identify said client computer to said server and to permit said server to report information 
relating to transactions with said client side computer to said transaction aggregator [column 11, 
lines 7-37]. 

12. As per claim 18-19, Downs teaches the system wherein said server comprises a storage 
device containing a folder of embedded links to digital content and wherein the address of said 
folder is selected one of and to be difficult to ascertain, said security module being operative to 
provide information relating to at least one of the links when said client computer sends a 
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request for content to said server and said security module indicates that that said client 
computer is authorized to access the content [column 25, lines 27-38]. 

1 3. As per claims 20-22, Downs further teaches the system wherein said security module 
creates a document containing references to the digital content and spawns a child instance of 
the rendering engine to render the document, and wherein said child instance of said rendering 
engine is operative to follow the references to retrieve content through an asynchronous 
protocol from a secured location [column 25, lines 15-37]. 

14. As per claims 28 and 29, Downs further teaches the system wherein said security 
component embeds all security information in a header of a document transmitted between said 
client computer and said server, said document having a body that does not contain security 
information for content in the document [column 27, metadata information]. 

15. As per claim 30 and 31, Downs further teaches the system wherein said security module 
is operative to check a request made by said client computer at two stages, a first stage filter 
checks if said request corresponds to a prohibited URL and a second stage filter checks if said 
request corresponds to a prohibited directory, and wherein if said request corresponds to a 
prohibited URL, or if said request corresponds to a prohibited directory, then said request is 
denied by said server [column 78, lines 8-21]. 

16. As per claims 37-72, the claimed steps correspond to the functions of the elements of 
the system claims 1-36, which has been rejected above and thus rejected with the same reason 
applied thereto. 
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17. Claims 73-75 are rejected under 35 U.S.C. 102(e) as being anticipated by Luckenbaugh 
etal. US Patent 6,31 1,269 B2 (hereinafter Luckenbaugh). 

18. As per claims 73-75, Luckenbaugh teaches an HTML document adapted to be rendered 
by Web browser in a secure environment (figure 2B), said document comprising: an HTML 
header defined between header tags (figure 2B, step 233); an HTML body containing content 
(figure 2B, step 234); and security information (i.e., Cookie) embedded in said header [figure 
2B, step 233]. 

Conclusion 

19. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See PTO Form 892. 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Beemnet W. Dada whose telephone number is (571) 272-3847. The 
examiner can normally be reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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Beemnet Dada 
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